Overview

overview

10

Static

static

10

JaffaCakes...b4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b221c50624c665ce1b830e73a62834b4

  • Size

    28KB

  • Sample

    250412-nqz3jatwcv

  • MD5

    b221c50624c665ce1b830e73a62834b4

  • SHA1

    23f8d3a44e9d73454baf21b1c51b76fc5b32b49b

  • SHA256

    4751e48228dd90ecd3058b193cedaeff77e82db9bf83ddf9448ba37b77dd04e6

  • SHA512

    4f7a533f67c8b3dc604bb23f137a3aff1eefb7e69dfb42e0734033f8ce2688861ee021de0b6671f4c74eeb190b1a7c50c96572b90c574170ecad06cc8be500bd

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNBs6QI:Dv8IRRdsxq1DjJcqfQ

Score
10/10
mydoomdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_b221c50624c665ce1b830e73a62834b4

    • Size

      28KB

    • MD5

      b221c50624c665ce1b830e73a62834b4

    • SHA1

      23f8d3a44e9d73454baf21b1c51b76fc5b32b49b

    • SHA256

      4751e48228dd90ecd3058b193cedaeff77e82db9bf83ddf9448ba37b77dd04e6

    • SHA512

      4f7a533f67c8b3dc604bb23f137a3aff1eefb7e69dfb42e0734033f8ce2688861ee021de0b6671f4c74eeb190b1a7c50c96572b90c574170ecad06cc8be500bd

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNBs6QI:Dv8IRRdsxq1DjJcqfQ

    Score
    10/10
    mydoomdiscoverypersistenceupxworm

    • Detects MyDoom family

    • MyDoom

      MyDoom is a Worm that is written in C++.

      wormmydoom

    • Mydoom family

      mydoom

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks